What is collected, why, and what you can ask of me. Information under Art. 13 & 14 GDPR.
Last updated: August 2026. This site is small and deliberately plain: it sets no cookies, runs no analytics, and shows no advertising. Data reaches me only when you choose to write to me or to book something.
Who is responsible
Immanuel Holtmannspoetter — MindBodyWorkFlow
Hermann-Kroeger-Str. 7B, 23669 Timmendorfer Strand, Germany
Telephone: +49 (0) 152 21396654
Email: immanuel@mindbodyworkflow.com
For the Embodied Design Retreat specifically, I organise the retreat together with Dorothee Andrew (info@dorotheeandrew.de), who is the contracting party for that booking. For that data we act as joint controllers under Art. 26 GDPR. You may exercise any of the rights below with either of us, and we will pass your request on to the other.
My hosting provider, Hostinger International Ltd., records the usual server log data — IP address, time of request, page requested, browser and operating system — for the technical operation and security of the site. The legal basis is my legitimate interest in a site that works and is not attacked (Art. 6 para. 1 lit. f GDPR). These logs are kept briefly and are not combined with anything else.
The two typefaces on this site are loaded from Google Fonts (Google Ireland Ltd.). Loading them transmits your IP address to Google. The legal basis is my legitimate interest in a consistent presentation (Art. 6 para. 1 lit. f GDPR). If you would rather avoid this, most browsers and content blockers can prevent it.
When you write through the contact form I receive your name, email address and your message. I use them only to answer you. The legal basis is Art. 6 para. 1 lit. b GDPR where your message concerns a possible engagement, otherwise my legitimate interest in replying to enquiries (lit. f). Messages arrive in my mailbox and stay there until the exchange is finished and there is no reason to keep it.
When you book a place, the details you enter — name, email, telephone, where you travel from, room preference, dietary choice, any allergies or intolerances, your message, and how you heard about us — are recorded in a spreadsheet held in Google Workspace and emailed to Dorothee and me. We use them for one purpose: to organise the retreat and to prepare your stay. The legal basis is the performance of your booking contract (Art. 6 para. 1 lit. b GDPR).
Allergy and intolerance information is passed only to the kitchen, is never used for anything else, and is deleted once the retreat is over.
Payments are handled by Stripe. Your card or account details go directly to Stripe and are never seen or stored by me — I see only that a payment succeeded, for what amount, and against which booking reference. Alternatively you may pay by bank transfer, in which case the transfer is visible only to the account holder's bank and to us.
You will not be added to any mailing list on the basis of a booking. If a newsletter ever exists, joining it will be a separate, deliberate step.
Who else sees your dataOnly the service providers needed to run the site and the retreat, each under a data-processing agreement and each bound to use the data solely on our instructions:
Some of these providers have parent companies in the United States, and data may be transferred there. Those transfers are covered by the European Commission's standard contractual clauses and, where applicable, the EU–US Data Privacy Framework. Beyond this, nothing is passed on, sold, or shared — except where I am legally obliged to, for example to the tax authorities.
How long it is keptYou may ask me at any time for a copy of the data I hold about you (Art. 15), to correct it (Art. 16), to delete it (Art. 17), to restrict its use (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on your consent, you may withdraw that consent at any time, without affecting what was lawful beforehand.
A simple email to immanuel@mindbodyworkflow.com is enough — no particular form is needed, and I will answer within a month.
You also have the right to complain to a supervisory authority. The one responsible for me is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel.
Cookies and trackingThis site sets no cookies of its own, uses no analytics, no tracking pixels, and no advertising networks. Nothing here follows you anywhere.
ChangesIf the site changes in a way that affects how data is handled, this notice is updated accordingly. The date at the top always tells you which version you are reading.